Add Multi-factor authentication D-bus config
This commit defines D-bus interfaces for multi-factor authentication
configuration to enable/disable various MFA authentication methods
These D-bus interfaces defined as per standard redfish interfaces
https://redfish.dmtf.org/schemas/v1/AccountService.v1_15_1.json
Change-Id: I52dcf3df95fb60b9f5ea384553b472b71f2be923
Signed-off-by: Ravi Teja <raviteja28031990@gmail.com>
diff --git a/gen/xyz/openbmc_project/User/MultiFactorAuthConfiguration/meson.build b/gen/xyz/openbmc_project/User/MultiFactorAuthConfiguration/meson.build
new file mode 100644
index 0000000..e4e66c9
--- /dev/null
+++ b/gen/xyz/openbmc_project/User/MultiFactorAuthConfiguration/meson.build
@@ -0,0 +1,15 @@
+# Generated file; do not modify.
+generated_sources += custom_target(
+ 'xyz/openbmc_project/User/MultiFactorAuthConfiguration__cpp'.underscorify(),
+ input: [ '../../../../../yaml/xyz/openbmc_project/User/MultiFactorAuthConfiguration.interface.yaml', ],
+ output: [ 'common.hpp', 'server.cpp', 'server.hpp', 'aserver.hpp', 'client.hpp', ],
+ depend_files: sdbusplusplus_depfiles,
+ command: [
+ sdbuspp_gen_meson_prog, '--command', 'cpp',
+ '--output', meson.current_build_dir(),
+ '--tool', sdbusplusplus_prog,
+ '--directory', meson.current_source_dir() / '../../../../../yaml',
+ 'xyz/openbmc_project/User/MultiFactorAuthConfiguration',
+ ],
+)
+
diff --git a/gen/xyz/openbmc_project/User/meson.build b/gen/xyz/openbmc_project/User/meson.build
index dca4fc3..16c6364 100644
--- a/gen/xyz/openbmc_project/User/meson.build
+++ b/gen/xyz/openbmc_project/User/meson.build
@@ -60,6 +60,21 @@
],
)
+subdir('MultiFactorAuthConfiguration')
+generated_others += custom_target(
+ 'xyz/openbmc_project/User/MultiFactorAuthConfiguration__markdown'.underscorify(),
+ input: [ '../../../../yaml/xyz/openbmc_project/User/MultiFactorAuthConfiguration.interface.yaml', ],
+ output: [ 'MultiFactorAuthConfiguration.md' ],
+ depend_files: sdbusplusplus_depfiles,
+ command: [
+ sdbuspp_gen_meson_prog, '--command', 'markdown',
+ '--output', meson.current_build_dir(),
+ '--tool', sdbusplusplus_prog,
+ '--directory', meson.current_source_dir() / '../../../../yaml',
+ 'xyz/openbmc_project/User/MultiFactorAuthConfiguration',
+ ],
+)
+
subdir('PrivilegeMapper')
generated_others += custom_target(
'xyz/openbmc_project/User/PrivilegeMapper__markdown'.underscorify(),
diff --git a/yaml/xyz/openbmc_project/User/MultiFactorAuthConfiguration.interface.yaml b/yaml/xyz/openbmc_project/User/MultiFactorAuthConfiguration.interface.yaml
new file mode 100644
index 0000000..b297f46
--- /dev/null
+++ b/yaml/xyz/openbmc_project/User/MultiFactorAuthConfiguration.interface.yaml
@@ -0,0 +1,38 @@
+description: >
+ This interface defines multi-factor authentication configuration. This
+ interface can be implemented at user manager object to enforce various MFA
+ authentication mechanisms to users on the system
+
+properties:
+ - name: Enabled
+ type: enum[self.Type]
+ default: None
+ description: >
+ Multi-factor authentication configuration. This interface will be
+ implemented by user manager D-bus object to support user's MFA
+ configuration on BMC.
+
+ - name: Supported
+ type: set[enum[self.Type]]
+ flags:
+ - readonly
+ description: >
+ This property is read only for populating allowed multi-factor
+ authentication types. When there are no multi-factor authentication
+ types are supported, this should be an empty set and should never
+ include 'None' enumeration value.
+
+enumerations:
+ - name: Type
+ description: >
+ Multi-factor authentication type enumeration, Types of multi-factor
+ authentication user account is allowed to configure.
+ values:
+ - name: GoogleAuthenticator
+ description: >
+ Google Authenticator supports Time-based One-time Password
+ two-factor authentication for logging into servers specified in
+ RFC 6238.
+ - name: None
+ description: >
+ Default value of multi-factor authentication configuration